Soumya Sambu 7ca4d7761b python3-twisted: Fix CVE-2024-41810
Twisted is an event-based framework for internet applications, supporting Python 3.6+.
The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability.
If application code allows an attacker to control the redirect URL this vulnerability
may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body.
This vulnerability is fixed in 24.7.0rc1.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-41810

Upstream patch:
046a164f89

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 09:53:18 +02:00
..
2020-07-03 18:07:05 -07:00
2020-07-03 18:07:09 -07:00
2020-04-20 21:45:13 -07:00
2020-04-21 07:14:06 -07:00
2022-03-21 09:57:28 -04:00
2020-04-01 23:32:54 -07:00
2020-04-03 14:38:09 -07:00
2021-08-03 10:21:25 -07:00
2021-08-03 10:21:25 -07:00
2022-03-21 09:57:28 -04:00